nerdexam
Cisco

200-201 · Question #394

An analyst performs traffic analysis to detect suspicious activity and identifies the multiple UDP connections through the same port. Which technology makes this behavior feasible?

The correct answer is D. NAT. Network Address Translation (NAT) allows multiple internal devices to share a single public IP address, making it appear externally as if multiple connections are originating from the same source port and IP.

Submitted by helene.fr· Mar 6, 2026Network Intrusion Analysis

Question

An analyst performs traffic analysis to detect suspicious activity and identifies the multiple UDP connections through the same port. Which technology makes this behavior feasible?

Options

  • ATOR
  • BACL
  • CP2P
  • DNAT

How the community answered

(64 responses)
  • A
    3% (2)
  • B
    9% (6)
  • C
    6% (4)
  • D
    81% (52)

Why each option

Network Address Translation (NAT) allows multiple internal devices to share a single public IP address, making it appear externally as if multiple connections are originating from the same source port and IP.

ATOR

TOR (The Onion Router) is a system for anonymous communication, not a technology that enables multiple internal devices to use the same external source port.

BACL

An ACL (Access Control List) is used to filter network traffic based on defined rules, not to allow multiple connections from different internal IPs to use the same external port.

CP2P

P2P (Peer-to-Peer) networking is a distributed application architecture, but it doesn't inherently facilitate multiple internal connections appearing as one external source port.

DNATCorrect

NAT translates private IP addresses and port numbers to a single public IP address and a potentially different port number when traffic leaves the private network, and vice-versa for incoming traffic. This allows multiple internal hosts to share one public IP, enabling them to make multiple connections using the same source port from an external perspective, differentiated by the NAT device's port mapping.

Concept tested: Network Address Translation (NAT) functionality

Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras/nat/network-address-translation-nat

Topics

#NAT#traffic analysis#UDP connections#network protocols

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice